adapter/

Package apko implements image.Composer by invoking the pinned apko binary.

Package cosign implements puboci.Signer and pubgh.BlobVerifier by invoking the pinned cosign binary.

Package ghact implements pubgh.ArtifactMeta with go-github.

Package ghattest verifies GitHub build-provenance attestations through the gh CLI.

Package ghbucket implements Scoop bucket repository reads and writes with the GitHub REST API.

Package ghrel implements pubgh.ReleaseReader and pubgh.Publisher with go-github.

Package ghtap implements Homebrew tap repository reads and writes with the GitHub REST API.

Package ghup implements pubgh.AssetReplacer by invoking the gh CLI.

Package gitx implements pubgh.RefResolver by invoking the git binary.

Package gpg creates deterministic aggregate APT and RPM metadata signatures with a configured GnuPG home, key identity, and owner-only passphrase file.

Package melange implements image.APKBuilder by invoking the pinned Melange binary.

Package pkginstall verifies package repositories with native package-manager clients.

Package pkgmeta reads normalized metadata from native DEB, RPM, and APK package files.

Package pkgverify verifies producer-native RPM and APK package signatures through fixed, networkless container invocations and producer public keys.

Package r2 stores package repository objects in Cloudflare R2 through its S3 API.

Package reg implements puboci.StateReader, puboci.ContentPusher, and puboci.TagCommitter with oras-go.

Package repogen regenerates deterministic APT, RPM/DNF, and APK repository metadata with the spike-selected native tools and publishes every SHA-256 and SHA-512 APT by-hash object advertised by the generated Release document.